Legal

Privacy Policy

Last updated: October 16, 2026

1. Data Controller

Keylasoft (“we”) develops and operates Elpia Seven. For privacy inquiries: privacy@elpia.app

2. Data We Collect

2.1 Identifier and Account Data

On first launch we automatically create an anonymous guest identifier (a user ID) to save your progress before any registration. If you choose to create or link an account, we collect your email address; if you sign in with Google, Google shares your email and basic profile with us under its own policy; if you sign in with Apple, Apple shares your email (or a private relay address, if you choose to hide yours) and, if you allow it, your name. The app assigns an automatic initial username (such as Guest_XXXXX) that you can change; this username is visible to other players. We do not ask for your legal name, phone number, address, or sensitive data.

2.2 Game Data

Trivia progress, scores, achievements, unlocked characters, in-game currency and premium currency transaction history. This data is stored so you can resume your progress on any device.

2.3 Technical Data

We automatically collect: device type and model, operating system version, technical device identifiers, crash reports and diagnostics (Firebase Crashlytics and New Relic, which includes network and screen traces), and usage data (Firebase Analytics and Microsoft Clarity, which records how you move through the app —taps, scrolls and screens visited— with all text hidden, so we can see where the experience gets stuck). We also derive an approximate, country-level location from your IP address (for regional pricing, fraud prevention, and advertising). We do not collect precise/GPS location, contacts, photos, or files. The camera is used only to scan Challenge invite QR codes: images are processed on-device and are never stored or transmitted. The microphone is used only for voice features you start yourself: the assistant's voice input, whose audio is transcribed transiently and not stored, and Elpia Live voice conversations, whose audio is streamed in real time through our server to Google (Gemini Live) to generate the spoken answer; we do not store it.

2.5 Messages and AI Conversations

Messages you post in a group (chat, prayer requests and announcements) are stored so the group's members can read them, and can be reported and moderated. The questions and messages you send to the AI study assistant are sent to Anthropic (Claude), or to Google (Gemini) when Claude is unavailable, only to generate the answer.

2.4 Purchases

In-app purchases are processed through Google Play or Apple's App Store (purchases and premium currency) and MercadoPago (donations). We do not store credit card data or financial information; we only receive a transaction identifier and purchase status to grant your content.

3. How We Use Data

We do not sell your personal data to third parties. We never will.

4. Third-Party Services

We use the following services that may process data according to their own privacy policies:

4.1 Advertising

On Android, the app shows ads through Google AdMob. To serve them, your device's advertising identifier and associated technical data are shared with Google/AdMob for advertising purposes, under Google's privacy policy. Before any ad request we ask for your consent through Google's privacy form (UMP). We do not use this data to personally identify you. Ads respect your age (13+) and never appear during an active question, a live match, or the checkout flow. The iPhone and iPad app shows no ads, does not access the advertising identifier (IDFA) and does not track you across other companies' apps or websites.

5. Data Retention & Your Rights

We retain your data while your account is active. You have the following rights over your data:

When you request deletion, your personal data is erased or anonymized approximately 30 days later (a recovery grace period). Transaction records may be retained for as long as required by applicable tax/accounting law.

For any question about your data, contact us at privacy@elpia.app.

6. Security

Data is transmitted encrypted (TLS/SSL). The local device database is encrypted with SQLCipher. We apply industry-standard practices to protect your information.

7. Children

Elpia Seven is intended for people aged 13 and older. It is not directed at children under 13, and we do not knowingly collect their data. If you believe a child under 13 has provided us with data, contact privacy@elpia.app to have it removed.

8. Your Rights

You may: access your data, request correction, request deletion, and revoke your consent for notifications at any time.

8.1 Applicable Law

The processing of your personal data is governed by Argentina's Personal Data Protection Law No. 25.326 (supervisory authority: AAIP) and, for users in Brazil, by the Brazilian General Data Protection Law (LGPD) (authority: ANPD). You may exercise your rights and lodge complaints with these authorities, or write to privacy@elpia.app.

9. Changes

We may update this policy. We will notify you of significant changes through the app.

10. Contact

For any privacy inquiries: privacy@elpia.app